Proposal: Change File Object Accessed_Time and Modified Time Fields To DateTimeObjectPropertyType

Status: Closed
Comment Period Closes: 12/17/2013
Affects Backwards Compatibility: YES
Relevant Issue: https://github.com/CybOXProject/schemas/issues/101

Background Information

In CybOX 2.0.1, the Accessed_Time and Modified_Time fields found within the FileObjectType are of of type, cyboxCommon:StringObjectPropertyType. Because these times represent date and time information, they should use the DateTimeObjectPropertyType datatype defined with the CybOX common schema.

Proposal

We propose changing the datatype of the Accessed_Time and Modified_Time fields within the FileObjectType to cyboxCommon:DateTimeObjectPropertyType. CybOX uses the DateTimeObjectPropertyType datatype when expressing timestamp information, so this proposal aligns the use of this datatype with conventions established by other CybOX timestamp fields.

The following XML schema changes will be made to the FileObjectType:

<xs:element name="Accessed_Time" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
    ...
</xs:element>

<xs:element name="Modified_Time" type="cyboxCommon:DateTimeObjectPropertyType" minOccurs="0">
   ...
</xs:element>

Impact

Existing CybOX 2.0.1 content which utilizes the Accessed_Time and Modified_Time fields and DOES NOT express those field values with an XML Schema xs:dateTime or ISO8601 compliant value will be rendered schema-invalid when validated against these changes.

Because these values represent timestamp information, it is felt that the data should be expressed in a manner that is consistent with other CybOX timestamp fields.

Requested Feedback

1. Are CybOX authors and consumers comfortable with changing the datatype to DateTimeObjectPropertyType, thus potentially breaking backwards compatibility?